Add CHANGES and release notes for #3901

This is a new feature that deserves attention.

diff --git a/CHANGES b/CHANGES
index c7ac45f7a71abbc1919021d0da6f5a2c46b05f6f..f5a5a86b96fd67639b357dfddf6d1bc41a6e5367 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6140.  [func]          Implement automatic parental-agents ('checkds yes').
+                       [GL #3901]
+
 6139.  [func]          Add isc_histo_t general-purpose log-linear histograms,
                        and use them for message size statistics. [GL !7696]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 208086c7e161b44bac1183ea37292ac34cbde56a..65aa488eedcd89b5b1a7ccdd27182fab77205f7e 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -34,6 +34,11 @@ New Features
   INFO log level to the DEBUG(1) log level, to prevent ``delv`` from
   emitting that message when setting up its internal resolver. :gl:`#3842`
 
+- A new configuration option :any:`checkds` is introduced that when set to
+  ``yes`` will detect :any:`parental-agents` automatically by resolving the
+  parent NS records. These name servers will be used to check the DS RRset
+  during a KSK rollover initiated by :any:`dnssec-policy`. :gl:`#3901`
+
 Removed Features
 ~~~~~~~~~~~~~~~~